This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json) Hash identifier: YkNzXi3VyLOw4/JkaLNGzoV0Upy8v7OdXlZNZfqsK+o= Subject key identifier: 43:35:A1:5B:A6:A8:7D:47:3D:24:5E:32:D8:22:48:A6:CD:F1:65:01 Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca Certificate serial: 019B717E061591BB3F0E421409BC7A9C6E5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft Manifest number: 0702 Signing time: Tue 30 Dec 2025 23:00:42 +0000 Manifest this update: Tue 30 Dec 2025 23:00:42 +0000 Manifest next update: Wed 31 Dec 2025 23:00:42 +0000 Files and hashes: 1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: kh0Wl0T6K+r2M+YI1FAXEp/2KNaUe9DZHQdzYUxiTDM=) 2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:06:15:91:bb:3f:0e:42:14:09:bc:7a:9c:6e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca Validity Not Before: Dec 30 23:00:42 2025 GMT Not After : Dec 31 23:00:42 2025 GMT Subject: CN=4335a15ba6a87d473d245e32d82248a6cdf16501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:9e:d6:c7:b5:65:ad:49:53:12:ff:9b:69: 27:3e:e1:29:04:fb:f2:c6:de:ac:55:a8:7b:21:90: 86:d5:7f:53:77:36:2d:19:f9:50:56:3b:3e:60:37: 88:bd:c1:a8:e5:48:19:a8:c6:a9:32:34:ee:db:8c: 58:ec:33:00:b1:f9:8b:3c:1b:ab:03:f6:84:77:7d: 4d:28:85:1b:96:a1:6f:60:ff:6b:74:fb:8a:7e:e1: b4:e8:14:ba:49:d7:4e:c8:1e:aa:58:73:a2:1d:86: ce:74:ec:6c:95:8b:21:d8:c4:b5:be:41:27:3e:94: cf:d5:4a:a3:9a:98:69:d0:72:5b:89:c7:2b:9b:0e: c9:ff:b0:45:d0:5e:f1:00:c7:4b:51:ab:66:58:7d: 0c:d2:30:6e:2b:27:eb:69:0f:9b:27:ad:00:70:80: 65:46:78:c2:f4:ea:ff:fb:35:b6:51:72:c6:be:bb: 2a:89:4d:df:09:99:3a:c0:a3:59:09:27:8a:26:cf: ea:9c:90:e5:24:24:02:ce:23:05:83:34:0a:d7:5b: b6:a0:fd:7b:ab:5d:c3:9f:50:47:12:a4:99:3e:38: ee:c7:c7:bc:59:7f:c8:19:88:58:12:e4:f6:3f:43: 3f:81:25:58:75:7f:11:59:1e:87:d9:27:a1:00:bd: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:35:A1:5B:A6:A8:7D:47:3D:24:5E:32:D8:22:48:A6:CD:F1:65:01 X509v3 Authority Key Identifier: keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6f:d6:d4:63:5e:a1:86:f8:27:4a:5e:97:5a:dc:de:42:17: 3e:21:d0:b7:85:ab:36:cf:e9:56:55:b2:b0:28:f5:cb:ca:b6: 37:82:69:ce:9a:96:43:27:9b:3f:59:d3:93:39:37:17:12:be: 17:c7:fe:b2:3b:21:cb:45:18:5f:27:ad:c7:81:c0:7e:3b:95: 45:18:07:fd:6e:92:2a:ff:60:a2:d4:ce:d8:6b:f1:e2:32:d2: 22:14:c5:62:28:7d:66:5f:29:08:7a:f2:5a:5d:0a:26:2a:8f: ae:21:28:4e:5a:4e:f0:b6:fd:3f:27:65:60:d1:b6:c4:89:33: 4a:e1:f8:df:48:e5:3c:7e:bb:64:44:42:5e:e0:a7:f6:09:cb: 08:3a:1f:b3:c7:d2:4d:49:04:cf:82:0b:01:a1:be:e9:fe:97: 14:9d:32:2c:d7:65:2e:39:87:18:75:69:69:23:68:0b:07:16: be:24:8e:8e:1f:3d:1c:00:6f:e6:bf:25:5c:d4:2e:d8:66:39: 05:13:76:bb:87:83:0d:f4:a0:64:2b:36:a8:43:76:da:fb:99: 97:26:14:52:b8:9a:d4:1d:33:ed:97:4c:d5:97:a1:26:0a:28: 7a:f8:29:51:eb:cc:27:69:84:b4:a0:ad:47:de:25:3b:2a:d6: e4:aa:15:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfgYVkbs/DkIUCbx6nG5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNjE0ODk2NWY3YWZmZWI1ODYwOTYxNWU2YWQ0ZTNlZWE4 Y2ViY2EwHhcNMjUxMjMwMjMwMDQyWhcNMjUxMjMxMjMwMDQyWjAzMTEwLwYDVQQD Eyg0MzM1YTE1YmE2YTg3ZDQ3M2QyNDVlMzJkODIyNDhhNmNkZjE2NTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseae1se1Za1JUxL/m2knPuEpBPvy xt6sVah7IZCG1X9TdzYtGflQVjs+YDeIvcGo5UgZqMapMjTu24xY7DMAsfmLPBur A/aEd31NKIUblqFvYP9rdPuKfuG06BS6SddOyB6qWHOiHYbOdOxslYsh2MS1vkEn PpTP1Uqjmphp0HJbiccrmw7J/7BF0F7xAMdLUatmWH0M0jBuKyfraQ+bJ60AcIBl RnjC9Or/+zW2UXLGvrsqiU3fCZk6wKNZCSeKJs/qnJDlJCQCziMFgzQK11u2oP17 q13Dn1BHEqSZPjjux8e8WX/IGYhYEuT2P0M/gSVYdX8RWR6H2SehAL2eIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM1oVumqH1HPSReMtgiSKbN8WUBMB8GA1UdIwQY MBaAFE9hSJZfev/rWGCWFeatTj7qjOvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDct ZGExYzQxNzU4MDJiLzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDctZGExYzQxNzU4MDJi LzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAim/W1GNe oYb4J0pel1rc3kIXPiHQt4WrNs/pVlWysCj1y8q2N4JpzpqWQyebP1nTkzk3FxK+ F8f+sjshy0UYXyetx4HAfjuVRRgH/W6SKv9gotTO2Gvx4jLSIhTFYih9Zl8pCHry Wl0KJiqPriEoTlpO8Lb9PydlYNG2xIkzSuH430jlPH67ZERCXuCn9gnLCDofs8fS TUkEz4ILAaG+6f6XFJ0yLNdlLjmHGHVpaSNoCwcWviSOjh89HABv5r8lXNQu2GY5 BRN2u4eDDfSgZCs2qEN22vuZlyYUUria1B0z7ZdM1ZehJgooevgpUevMJ2mEtKCt R94lOyrW5KoVTw== -----END CERTIFICATE-----Generated at Wed Dec 31 05:55:22 2025 by rpki-client